Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/3133382e3138362e38342e302f32322d3332203d3e20323633383535.roa
File:                     3133382e3138362e38342e302f32322d3332203d3e20323633383535.roa (raw, json)
Hash identifier:          pnUieEj9IR6tHX8ompqr/+PGdNPjmcWT9c7E2OXLiW4=
Subject key identifier:   B8:A2:D2:D4:42:32:5C:E6:5A:ED:9D:F9:9B:DB:35:6D:DE:32:F2:85
Certificate issuer:       /CN=06F3CB49A918297B5AC7DDDBE54A101D2FB4773B
Certificate serial:       362AD3DA7BD634190031BC1F76878C4E2B516C9A
Authority key identifier: 06:F3:CB:49:A9:18:29:7B:5A:C7:DD:DB:E5:4A:10:1D:2F:B4:77:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06F3CB49A918297B5AC7DDDBE54A101D2FB4773B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/3133382e3138362e38342e302f32322d3332203d3e20323633383535.roa
Signing time:             Thu 02 Jan 2025 22:25:33 +0000
ROA not before:           Thu 02 Jan 2025 22:20:33 +0000
ROA not after:            Thu 01 Jan 2026 22:25:33 +0000
asID:                     263855
IP address blocks:        138.186.84.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/06F3CB49A918297B5AC7DDDBE54A101D2FB4773B.crl
                          rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/06F3CB49A918297B5AC7DDDBE54A101D2FB4773B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06F3CB49A918297B5AC7DDDBE54A101D2FB4773B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 21:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:2a:d3:da:7b:d6:34:19:00:31:bc:1f:76:87:8c:4e:2b:51:6c:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06F3CB49A918297B5AC7DDDBE54A101D2FB4773B
        Validity
            Not Before: Jan  2 22:20:33 2025 GMT
            Not After : Jan  1 22:25:33 2026 GMT
        Subject: CN=B8A2D2D442325CE65AED9DF99BDB356DDE32F285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:4f:84:83:80:90:46:48:c9:34:25:38:16:4d:
                    36:eb:db:59:e6:e8:d0:b6:b2:bb:33:c1:68:c0:9f:
                    88:2a:4e:5c:10:20:c9:c7:5e:c5:9f:fa:1e:53:b3:
                    f2:c4:ac:48:32:80:60:4e:79:68:fd:8f:dc:a0:3b:
                    f3:ba:0a:a6:ae:76:4b:bd:b1:6a:17:35:21:6d:91:
                    4f:23:92:7e:7c:1c:99:0b:10:8c:2b:bb:52:da:57:
                    ac:59:89:41:a2:9c:36:c4:dd:ea:de:22:31:a1:bf:
                    34:d0:84:76:72:c9:a3:bd:86:42:ec:ea:97:61:e4:
                    cf:c1:67:4e:ad:e0:fe:e3:df:5c:42:62:5b:a1:9f:
                    45:14:77:6a:b1:2d:cd:ac:9c:b3:e5:6f:62:00:2e:
                    85:3d:bb:aa:f0:02:f2:1d:15:10:19:87:3f:a8:9b:
                    3d:1f:bc:ea:54:d0:1f:b6:76:0e:45:be:63:c0:01:
                    4f:78:ad:77:91:39:6a:47:de:4a:74:8e:97:11:03:
                    91:13:59:ae:fd:98:3a:73:ac:17:be:48:b1:e0:17:
                    41:83:29:51:f7:93:ea:2d:8c:c4:2f:7b:3d:74:b3:
                    75:a9:bb:3f:cd:68:c2:de:f1:d2:da:be:60:8c:53:
                    8e:67:f8:b0:8f:e8:ae:68:73:ad:b7:cc:0c:d7:7d:
                    7c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A2:D2:D4:42:32:5C:E6:5A:ED:9D:F9:9B:DB:35:6D:DE:32:F2:85
            X509v3 Authority Key Identifier:
                keyid:06:F3:CB:49:A9:18:29:7B:5A:C7:DD:DB:E5:4A:10:1D:2F:B4:77:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/06F3CB49A918297B5AC7DDDBE54A101D2FB4773B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/06F3CB49A918297B5AC7DDDBE54A101D2FB4773B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmggntuXyFxRyVT8XAB6HNqibmqay69DxgpLAX7RUJ8u/0/3133382e3138362e38342e302f32322d3332203d3e20323633383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:02:23:19:05:3b:43:2d:69:79:8a:0f:05:a6:70:cf:c1:da:
         08:b6:3b:f5:b8:52:b4:ca:21:b7:b2:49:d9:92:94:32:e5:4d:
         03:58:39:5a:6e:c8:80:e2:ea:1e:6c:fa:27:de:68:f0:10:eb:
         ba:80:ad:fb:4d:b6:83:24:e8:5b:ff:61:cd:b1:b8:2e:92:09:
         17:b9:86:6a:d4:f1:fe:db:0a:a5:e9:a6:fc:58:c7:8e:07:c9:
         46:03:13:da:f0:60:8e:cd:69:e4:c7:3b:ee:25:01:09:0b:a1:
         e2:d3:4f:3b:c4:12:99:74:ab:f8:87:7f:d7:43:75:3b:65:a0:
         fc:19:3d:ef:c9:23:12:d2:cb:6d:0e:19:37:b2:3a:7a:84:7d:
         5b:16:5e:3a:1d:0f:7d:60:a2:1c:09:9b:52:8d:c2:55:80:82:
         17:27:13:8e:c8:8e:c1:42:b0:a0:c9:0f:6c:4d:d8:f6:ab:e7:
         7a:04:c0:7d:12:98:21:9b:aa:6a:0d:2b:75:80:1d:80:64:cd:
         59:39:eb:97:cf:5d:9d:d1:d7:8d:02:35:c2:74:7c:ba:ca:cb:
         66:2e:c9:73:de:30:ad:c2:94:2b:9d:4b:e0:78:68:cb:8f:d2:
         33:e2:25:ac:dc:2a:84:6d:19:18:4c:f8:31:31:48:de:00:64:
         38:c4:07:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:47:55 2025 by rpki-client